Omnifaces vulnerabilities

Products

• Omnifaces 2

Newest

• omnifaces OmniFaces: Forged combined-resource IDs and related output/push boundaries CVE-2026-102695 Fix available 8.2 HighJuly 24, 2026
• omnifaces OmniFaces: EL injection via crafted resource name in wildcard CDN mapping CVE-2026-41883 Fix available 8.1 HighApril 16, 2026